Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/138c02a3-d152-354b-8cf8-52bbdad89e92.roa
File:                     138c02a3-d152-354b-8cf8-52bbdad89e92.roa (raw, json)
Hash identifier:          HNjo0wegpwwf8N18DaoVV2j/mqOd6TjXyYlTsXgPC78=
Subject key identifier:   26:75:C7:FC:16:47:55:11:29:23:98:8A:FF:0E:9A:03:B4:24:7E:A7
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584A454039274C154EE5AC1CA100
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/138c02a3-d152-354b-8cf8-52bbdad89e92.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     198949
IP address blocks:        2607:cc80:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:39:27:4c:15:4e:e5:ac:1c:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=2700e5ae-3f54-4651-a088-d3e5a6e4ddd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:5b:93:ff:fd:38:af:24:e7:5e:de:64:b6:
                    77:77:3f:54:19:66:b6:d4:39:ee:57:d4:16:5a:39:
                    c7:97:01:83:81:69:2c:ea:8e:11:87:89:1e:55:07:
                    80:88:5c:47:1f:38:78:aa:1d:6b:54:08:06:65:66:
                    7e:de:23:27:fa:7b:7f:f2:4a:f1:17:a2:8e:a6:0f:
                    86:1d:1c:2b:e1:06:1d:f4:28:88:aa:0b:9a:50:65:
                    47:91:ab:ad:af:f7:7f:c4:d0:4f:2d:6e:31:ae:aa:
                    ab:ae:87:89:00:9e:32:c9:16:50:cd:27:a8:e5:f5:
                    b9:84:ff:52:fe:c7:68:15:c2:48:94:fe:9c:ea:1e:
                    a3:b0:52:87:4d:da:26:f0:88:0f:72:79:1f:a3:bf:
                    99:34:e7:8c:24:9f:26:97:ed:af:cd:eb:d6:06:69:
                    5a:eb:bd:aa:ca:02:04:95:85:3c:98:16:7c:8e:1f:
                    fd:01:ca:65:31:e5:be:58:8e:f0:c3:38:a4:2a:91:
                    32:f3:02:16:35:5e:28:94:4a:21:c9:4c:50:2b:84:
                    22:4e:ee:f9:ef:c4:4c:eb:67:f7:c3:a5:f2:da:ec:
                    d7:3c:a4:d7:13:23:00:13:0f:52:43:8b:16:ae:59:
                    c3:e1:d2:01:11:2e:70:25:05:66:cb:d0:9b:8b:5a:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:C7:FC:16:47:55:11:29:23:98:8A:FF:0E:9A:03:B4:24:7E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/138c02a3-d152-354b-8cf8-52bbdad89e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:30:9a:28:37:a5:82:25:46:20:8c:bb:20:9d:f5:e2:32:
         9b:71:84:98:89:01:66:1b:70:c4:16:64:d9:fc:df:08:b2:6a:
         37:9e:16:78:b6:4a:4a:a8:0b:5a:1f:c7:a8:6e:b6:e9:b8:f1:
         6e:b9:c3:25:48:2c:4e:39:3a:cf:21:f9:7e:13:57:d2:72:02:
         05:06:fe:2a:b2:2b:c6:44:1f:52:9b:d1:49:bb:c7:48:e8:58:
         10:d0:28:14:27:35:a6:1a:31:37:a6:d9:34:aa:d1:2b:9a:99:
         66:4d:2b:ff:ed:cc:e6:2b:00:0a:20:a5:30:55:d9:17:50:d1:
         1e:be:0d:36:3e:97:d6:8b:a2:31:72:79:e0:2b:14:96:35:fd:
         75:67:28:a5:f0:6f:24:db:77:e1:dd:fb:56:a3:fb:9f:48:59:
         32:e5:00:be:ff:07:eb:f6:15:21:76:dd:6f:b5:a9:a7:ee:82:
         2d:32:1a:76:b2:cf:41:e1:42:4f:91:4b:0a:5f:23:02:7e:d4:
         d5:32:49:d7:37:c5:d8:37:8b:c4:b5:f2:7c:c0:fe:9d:03:3f:
         94:bf:0a:83:b0:14:ce:15:ae:74:de:6d:b7:1b:32:de:4c:23:
         24:91:dd:b3:6c:8d:1c:fe:4c:cf:70:c6:ed:6d:7b:2f:56:22:
         45:17:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:59:57 2025 by rpki-client